Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ad10ea35-ff33-4a8a-bfb7-eb6edd7a4bae.roa
File:                     ad10ea35-ff33-4a8a-bfb7-eb6edd7a4bae.roa (raw, json)
Hash identifier:          tmp5MxbInHAbqYZKsqcvTakDvWlh08TfOasvjxr7STM=
Subject key identifier:   50:07:BA:59:64:92:05:A1:B5:31:0D:68:86:0A:B3:BA:B3:E5:C5:6F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       29E0BF8A98502A62A993A719F3378ACB518CF498
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ad10ea35-ff33-4a8a-bfb7-eb6edd7a4bae.roa
Signing time:             Tue 28 Feb 2023 00:00:00 +0000
ROA not before:           Tue 28 Feb 2023 00:00:00 +0000
ROA not after:            Fri 03 Mar 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e0:bf:8a:98:50:2a:62:a9:93:a7:19:f3:37:8a:cb:51:8c:f4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Feb 28 00:00:00 2023 GMT
            Not After : Mar  3 23:59:59 2023 GMT
        Subject: serialNumber=b74f705f1df2b46829b27c7c1b2f8d6280775860d0246277c44346c0d5a381bb, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:e2:ca:d5:a0:7d:a1:1f:78:ce:91:83:82:
                    37:1f:d9:ca:9d:9d:b3:4d:40:97:6e:4c:6c:38:62:
                    66:23:44:d1:ee:87:8c:2e:ff:c9:a7:04:dd:23:29:
                    a8:84:c6:c8:1a:7e:bb:14:39:ab:10:74:47:ae:e3:
                    db:36:31:ad:a8:ca:05:1e:b8:49:32:37:2e:d2:76:
                    d5:f6:3a:39:1c:4d:9f:bc:06:b7:ce:05:36:85:0c:
                    da:a2:6c:13:6f:4d:11:c4:55:be:f0:d3:19:aa:c9:
                    8d:29:76:81:c1:02:9d:d1:0f:48:cc:05:c4:c4:6b:
                    af:33:e1:04:7c:f2:f0:31:b6:94:7b:2a:4b:8f:c2:
                    ca:d9:a7:a7:c9:a3:69:39:d3:46:1c:e7:65:56:c8:
                    39:93:37:79:dd:04:0f:f3:22:e0:27:c5:20:42:05:
                    1d:6c:8f:ea:7a:e3:90:22:58:d4:60:ec:19:e0:69:
                    5e:23:57:43:49:f0:61:ef:2c:fd:fe:3d:d4:f0:96:
                    55:71:5b:29:51:ce:4e:9c:cd:04:9a:41:5d:fd:1d:
                    83:d4:6f:3f:c4:0f:fb:bf:aa:28:ea:c7:ea:75:39:
                    a4:57:ac:ea:d0:26:70:73:04:aa:b5:5c:3f:32:20:
                    56:78:b5:09:65:fd:36:6e:e3:58:fa:a7:30:ee:98:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:BA:59:64:92:05:A1:B5:31:0D:68:86:0A:B3:BA:B3:E5:C5:6F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/ad10ea35-ff33-4a8a-bfb7-eb6edd7a4bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:b5:17:e4:bd:32:97:1e:d3:df:9e:f6:b2:c7:d5:06:9d:
         fc:67:2b:f3:63:17:e8:13:07:fb:60:2f:10:67:97:d3:ee:42:
         6d:dd:38:1f:99:4a:63:02:55:6e:0f:7d:89:ee:26:16:eb:5e:
         b0:88:04:c9:07:8b:f3:0c:74:c7:34:26:e9:1c:86:29:87:62:
         1e:62:aa:5f:6e:e1:bb:72:8a:1c:9e:67:fe:f7:62:0d:01:d3:
         16:36:68:41:d1:fe:eb:5d:c5:6c:88:79:7d:95:7d:85:79:05:
         45:ea:09:6a:bc:e2:67:29:3c:f5:13:53:16:4a:b3:f2:a4:5d:
         38:74:55:03:ab:15:ee:c8:94:e6:0e:be:98:03:5f:a6:fd:eb:
         bf:88:66:f2:c0:a1:96:de:4d:61:5a:a2:e9:c4:0b:ab:a2:2f:
         d1:da:fe:eb:3c:3f:02:fd:97:65:cc:82:3f:55:4e:42:dc:87:
         00:50:65:e5:14:04:47:69:69:18:87:1c:7c:1c:d3:72:13:d7:
         4d:f9:81:4b:e6:0a:91:26:20:ff:5a:20:49:7c:cd:72:69:b0:
         d9:61:03:ff:ce:2f:f8:bb:e4:cc:ca:e4:21:9e:bb:87:41:0e:
         22:ee:ab:53:92:64:03:2b:16:d8:c5:ae:fe:bf:db:dd:f8:70:
         1c:ae:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----